GRC Analyst — Security & Compliance (Hybrid, NYC/DC)

Peregrine; Washington (District of Columbia); Vor Ort; USD 150.000 - 165.000; Vollzeit

Zusammenfassung

Peregrine is seeking a Governance, Risk, and Compliance (GRC) Analyst to strengthen our security and compliance program. You will help develop and maintain frameworks ensuring regulatory and contractual standards across data protection, privacy, and security.

You’ll partner with engineering, product, and leadership to maintain compliance across multiple frameworks. You’ll implement and improve controls, manage documentation and audits, and foster a culture of security and trust.

Qualifikationen

• 7–10 years of information security, compliance, or risk management experience in regulated industries.
• Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53, or similar frameworks.
• Understanding of cloud-native SaaS environments, microservices, VPCs/VPNs, RBAC and MFA.
• Detail-oriented approach to managing documentation and multiple compliance tasks.
• Collaborative and curious mindset with ability to translate security concepts for diverse audiences.

Aufgaben

• Support implementation, tracking, and continuous improvement of compliance frameworks (SOC 2, CJIS, HIPAA, ISO 27001, GDPR, FedRAMP, NIST 800-53).
• Manage and organize compliance documentation, audits, and evidence collection for internal and external stakeholders.
• Collaborate with engineering, product, and leadership to update policies, procedures, and controls on data protection and incident response.
• Maintain awareness of security best practices in AWS, including GuardDuty, SecurityHub, Inspector, and Config.
• Utilize tools like Vanta, Drata, SecureFrame, or HyperProof to streamline reporting.
• Ensure IAM, MFA, and least-privilege principles are applied correctly.
• Contribute to audit readiness and respond to customer/vendor inquiries.

Kenntnisse

Info security

Regulatory compliance

Risk management

Documentation

Collaboration

Tools

Vanta

Drata

SecureFrame

HyperProof

Jobbeschreibung

Peregrine is seeking a Governance, Risk, and Compliance (GRC) Analyst to strengthen our security and compliance program. You will help develop and maintain frameworks ensuring regulatory and contractual standards across data protection, privacy, and security.

You’ll partner with engineering, product, and leadership to maintain compliance across multiple frameworks. You’ll implement and improve controls, manage documentation and audits, and foster a culture of security and trust.